Security Advisory
CVE-2025-46417
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization.